Static task
static1
Behavioral task
behavioral1
Sample
23ca55fb033307bc1a98effc9d3934df_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23ca55fb033307bc1a98effc9d3934df_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
23ca55fb033307bc1a98effc9d3934df_JaffaCakes118
-
Size
1.0MB
-
MD5
23ca55fb033307bc1a98effc9d3934df
-
SHA1
02e923a719a706c410834ab8d29d96e702243c8e
-
SHA256
c4aed94344f7433b72f3fe1d84b376fcdaee20dbfc0640f8fa5dd3352508bc22
-
SHA512
0893d6a44d3455a5ab2744b8aab07ac6f6dd2b5bebeb779b7a7c349a0383fff73cac7e4d08c0df20225b0a6b51edfd953e38e19aa409dd4578bf460fe6c7ac80
-
SSDEEP
24576:BKBRUyR6csUdljUWAfw79bzemciJJYHKI0ZP:Sl9sojZV79nPJYq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23ca55fb033307bc1a98effc9d3934df_JaffaCakes118
Files
-
23ca55fb033307bc1a98effc9d3934df_JaffaCakes118.exe windows:5 windows x86 arch:x86
238ea10ec31d73382063dc742e554c6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
CreateErrorInfo
LoadTypeLi
VarNeg
VarI4FromStr
VariantChangeType
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayRedim
SafeArrayCreate
SysStringLen
crypt32
CryptMsgUpdate
CryptBinaryToStringW
CryptStringToBinaryW
CertFreeCertificateChain
CertGetCertificateChain
CryptProtectData
CryptQueryObject
CertNameToStrW
CryptExportPKCS8
CryptExportPublicKeyInfo
CertVerifyTimeValidity
CryptHashCertificate
CertControlStore
CryptEncodeObjectEx
CryptEncodeObject
CryptDecodeObjectEx
CryptFindOIDInfo
CryptEnumOIDInfo
CryptMsgOpenToDecode
CryptMsgGetParam
CertCreateCertificateContext
CertSetCertificateContextProperty
CertFreeCRLContext
CertAddStoreToCollection
kernel32
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
FreeEnvironmentStringsW
GetProcAddress
GlobalLock
GlobalUnlock
VirtualAlloc
HeapAlloc
HeapFree
GetCurrentThreadId
GetLastError
LeaveCriticalSection
CloseHandle
GetSystemInfo
CreateMutexW
CreateEventW
CreateFileW
QueryPerformanceCounter
MultiByteToWideChar
GetUserDefaultLCID
GetCommandLineA
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
IsProcessorFeaturePresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
setupapi
SetupOpenInfFileW
SetupCloseInfFile
SetupFindFirstLineW
SetupOpenFileQueue
SetupInstallFromInfSectionW
SetupDiOpenDeviceInterfaceW
SetupDiGetSelectedDriverW
SetupDiGetDriverInfoDetailW
SetupDiGetClassDevsExW
SetupDiGetDeviceInstallParamsW
CM_Get_Device_ID_ExW
CM_Get_DevNode_Status
user32
GetKeyboardLayoutList
TranslateMessage
UnregisterClassW
RegisterClassExW
GetDlgItemInt
CharLowerW
GetActiveWindow
GetMenuItemCount
AppendMenuW
DrawTextW
GetWindowDC
ScrollWindowEx
SetScrollRange
GetClientRect
AdjustWindowRectEx
GetSysColor
GetWindow
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 954KB - Virtual size: 8.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ